CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

IBM Security Bulletins•added 2023/06/05 3:57 p.m.•25 views

Security Bulletin: IBM Maximo Asset Management is vulnerable to stored cross-site scripting (CVE-2022-35645)

Summary IBM Maximo Asset Management is vulnerable to stored cross-site scripting. Vulnerability Details CVEID:CVE-2022-35645 DESCRIPTION: IBM Maximo Asset Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

6.4CVSS5.6AI score0.00493EPSS

Exploits0Affected Software11

OSV•added 2023/03/02 9:15 p.m.•5 views

CVE-2022-35645

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS5.5AI score0.00493EPSS

Exploits0References3

CVE•added 2023/03/02 8:14 p.m.•82 views

CVE-2022-35645

The CVE-2022-35645 issue affects IBM Maximo Asset Management core products versions 7.6.1.1–7.6.1.3 and IBM Maximo Application Suite versions 8.8–8.9, with stored cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials in a trusted s...

6.4CVSS5.3AI score0.00493EPSS

Exploits0References3Affected Software2